Comparing certificates Experimental feature

You are comparing two certificates. By default, only differing attributes are shown. Use the button below to show/hide all attributes.

Showing only differing attributes.
CENTAGATE v3.010-build13
ISCB-3-RPT-C072-CR-v1 		PalmSecure SDK Version 24 Premium
BSI-DSZ-CC-0511-2008
name CENTAGATE v3.010-build13 PalmSecure SDK Version 24 Premium
category Other Devices and Systems Biometric Systems and Devices
scheme MY DE
not_valid_after 06.06.2022 01.09.2019
not_valid_before 06.06.2017 30.12.2008
report_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/ISCB-5-RPT-C072-CR-v1.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0511a.pdf
st_link https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/2017-05-08-CTG-ST-3.0.pdf https://www.commoncriteriaportal.org/nfs/ccpfiles/files/epfiles/0511b.pdf
manufacturer SecureMetric Technology Sdn Bhd Fujitsu Limited
manufacturer_web https://www.securemetric.com/ https://www.fujitsu.com/
security_level EAL4+, ALC_FLR.2 EAL2
dgst 4149b933ed4230dd ca5a5c3b72c34bc3
heuristics/cert_id ISCB-3-RPT-C072-CR-v1 BSI-DSZ-CC-0511-2008
heuristics/cert_lab [] BSI
heuristics/extracted_sars ASE_INT.1, ALC_CMC.4, ASE_ECD.1, ATE_COV.2, ASE_TSS.1, ALC_TAT.1, ASE_SPD.1, ALC_DEL.1, ALC_LCD.1, ALC_FRL.2, AGD_OPE.1, AVA_VAN.3, AGD_PRE.1, ALC_CMS.4, ATE_FUN.1, ADV_ARC.1, ASE_OBJ.2, ADV_TDS.3, ATE_DPT.1, ALC_FLR.2, ASE_REQ.2, ALC_DVS.1, ADV_FSP.4, ATE_IND.2, ASE_CCL.1 ALC_LCD.2, ASE_INT.1, ALC_DVS.2, AVA_VAN.2, ADV_FSP.2, ASE_ECD.1, APE_ECD.1, ASE_TSS.1, ASE_SPD.1, ALC_DEL.1, ALC_TAT.3, ALC_FLR.3, AGD_OPE.1, AGD_PRE.1, ALC_CMS.2, ATE_FUN.1, APE_REQ.2, ATE_COV.1, ADV_ARC.1, ASE_OBJ.2, APE_CCL.1, ADV_IMP.2, ASE_REQ.2, ATE_DPT.4, ADV_INT.3, APE_INT.1, APE_SPD.1, ALC_CMC.2, ATE_IND.2, APE_OBJ.2, ASE_CCL.1, ADV_TDS.6, ADV_SPM.1
heuristics/extracted_versions 3.010 24
pdf_data/report_filename ISCB-5-RPT-C072-CR-v1.pdf 0511a.pdf
pdf_data/report_frontpage
  • DE:
  • DE:
    • cert_id: BSI-DSZ-CC-0511-2008
    • cert_item: PalmSecure SDK Version 24 Premium
    • cert_lab: BSI
    • developer: Fujitsu Limited
    • match_rules: ['(BSI-DSZ-CC-.+?) (?:for|For) (.+?) from (.*)']
pdf_data/report_keywords/cc_cert_id
  • MY:
    • ISCB-3-RPT-C072-CR-v1: 28
  • DE:
    • BSI-DSZ-CC-0511-2008: 16
pdf_data/report_keywords/cc_security_level
  • EAL:
    • EAL4: 5
    • EAL4 augmented: 1
    • EAL4+: 4
  • EAL:
    • EAL 1: 1
    • EAL 2: 3
    • EAL 4: 1
    • EAL 7: 1
    • EAL1: 6
    • EAL2: 4
    • EAL3: 4
    • EAL4: 4
    • EAL5: 6
    • EAL6: 3
    • EAL7: 4
pdf_data/report_keywords/cc_sar
  • ALC:
    • ALC_FLR.2: 7
  • ADV:
    • ADV_ARC: 1
    • ADV_ARC.1: 1
    • ADV_FSP: 1
    • ADV_FSP.1: 1
    • ADV_FSP.2: 1
    • ADV_FSP.3: 1
    • ADV_FSP.4: 1
    • ADV_FSP.5: 1
    • ADV_FSP.6: 1
    • ADV_IMP: 1
    • ADV_IMP.1: 1
    • ADV_IMP.2: 1
    • ADV_INT: 1
    • ADV_INT.1: 1
    • ADV_INT.2: 1
    • ADV_INT.3: 1
    • ADV_SPM: 1
    • ADV_SPM.1: 1
    • ADV_TDS: 1
    • ADV_TDS.1: 1
    • ADV_TDS.2: 1
    • ADV_TDS.3: 1
    • ADV_TDS.4: 1
    • ADV_TDS.5: 1
    • ADV_TDS.6: 1
  • AGD:
    • AGD_OPE: 1
    • AGD_OPE.1: 1
    • AGD_PRE: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC: 1
    • ALC_CMC.1: 1
    • ALC_CMC.2: 1
    • ALC_CMC.3: 1
    • ALC_CMC.4: 1
    • ALC_CMC.5: 1
    • ALC_CMS: 1
    • ALC_CMS.1: 1
    • ALC_CMS.2: 1
    • ALC_CMS.3: 1
    • ALC_CMS.4: 1
    • ALC_CMS.5: 1
    • ALC_DEL: 1
    • ALC_DEL.1: 1
    • ALC_DVS: 1
    • ALC_DVS.1: 1
    • ALC_DVS.2: 1
    • ALC_FLR: 1
    • ALC_FLR.1: 1
    • ALC_FLR.2: 1
    • ALC_FLR.3: 1
    • ALC_LCD.1: 1
    • ALC_LCD.2: 1
    • ALC_TAT: 1
    • ALC_TAT.1: 1
    • ALC_TAT.2: 1
    • ALC_TAT.3: 1
  • APE:
    • APE_CCL.1: 1
    • APE_ECD.1: 1
    • APE_INT.1: 1
    • APE_OBJ.1: 1
    • APE_OBJ.2: 1
    • APE_REQ.1: 1
    • APE_REQ.2: 1
    • APE_SPD.1: 1
  • ASE:
    • ASE_CCL: 1
    • ASE_CCL.1: 1
    • ASE_ECD: 1
    • ASE_ECD.1: 1
    • ASE_INT: 1
    • ASE_INT.1: 1
    • ASE_OBJ: 1
    • ASE_OBJ.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.1: 1
    • ASE_REQ.2: 1
    • ASE_SPD: 1
    • ASE_SPD.1: 1
    • ASE_TSS: 1
    • ASE_TSS.1: 1
    • ASE_TSS.2: 1
  • ATE:
    • ATE_COV: 1
    • ATE_COV.1: 1
    • ATE_COV.2: 1
    • ATE_COV.3: 1
    • ATE_DPT: 1
    • ATE_DPT.1: 1
    • ATE_DPT.2: 1
    • ATE_DPT.3: 1
    • ATE_DPT.4: 1
    • ATE_FUN: 1
    • ATE_FUN.1: 1
    • ATE_FUN.2: 1
    • ATE_IND: 1
    • ATE_IND.1: 1
    • ATE_IND.2: 1
    • ATE_IND.3: 1
  • AVA:
    • AVA_VAN: 2
    • AVA_VAN.1: 1
    • AVA_VAN.2: 1
    • AVA_VAN.3: 1
    • AVA_VAN.4: 1
    • AVA_VAN.5: 1
pdf_data/report_keywords/cc_claims
  • OE:
    • OE.ADMINISTRATION: 1
    • OE.AUDIT_REACTION: 1
    • OE.AUTHADMIN: 1
    • OE.ENROLMENT: 1
    • OE.ENVIRONMENT: 1
    • OE.FALLBACK: 1
    • OE.PHYSICAL: 1
    • OE.ROLES_AND_ACCESS: 1
pdf_data/report_keywords/vendor
  • Microsoft:
    • Microsoft: 7
pdf_data/report_keywords/eval_facility
  • SRC:
    • SRC Security Research & Consulting: 3
pdf_data/report_keywords/crypto_protocol
  • VPN:
    • VPN: 1
pdf_data/report_keywords/technical_report_id
  • BSI:
    • BSI 7125: 2
    • BSI 7148: 1
    • BSI 7149: 1
pdf_data/report_keywords/standard_id
  • ISO:
    • ISO/IEC 18045: 2
    • ISO/IEC15408: 2
pdf_data/report_keywords/certification_process
  • OutOfScope:
    • OTP Hardware token, where this is out of the evaluation. SMS service to register the device is also out of scope. 18 Potential consumers of the TOE are advised that some functions and services may not have been: 1
    • out of scope: 1
  • ConfidentialDocument:
    • 8] Evaluation Technical Report, Version 1.1, 24.11.2008, SRC Security Research & Consulting GmbH, (confidential document) [9] Security guide (PalmSecureTM Version 24 Premium), Fujitsu, First edition, September 2008 [10: 1
  • OutOfScope:
    • out of scope: 1
    • tests at the ITSEF excepting such tests which are related to functions or parameters which are out of scope of the evaluation (functions regarding enrolment and identification, parameters regarding threshold: 1
pdf_data/report_metadata
  • /Author: ISCB Department
  • /CreationDate: D:20170720054033+00'00'
  • /Creator: Microsoft Word
  • /Keywords: MyCB_TMP_002
  • /ModDate: D:20170720054033+00'00'
  • /Subject: CENTAGATE v3.0.10-build13
  • /Title: C072 Certification Report
  • pdf_file_size_bytes: 649341
  • pdf_hyperlinks: http://www.cybersecurity.my/mycc, mailto:[email protected]
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 29
  • /Author: Bundesamt für Sicherheit in der Informationstechnik
  • /CreationDate: D:20090202084856+01'00'
  • /Creator: Writer
  • /Keywords: "Common Criteria, Certification, Zertifizierung, PalmSecure SDK Version 24 Premium, Fujitsu Limited"
  • /ModDate: D:20090202150925+01'00'
  • /Producer: StarOffice 8
  • /Subject: Common Criteria Certification
  • /Title: Certification Report BSI-DSZ-CC-0511-2008
  • pdf_file_size_bytes: 922937
  • pdf_hyperlinks: http://www.bsi.bund.de/
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 34
pdf_data/st_filename 2017-05-08-CTG-ST-3.0.pdf 0511b.pdf
pdf_data/st_keywords/cc_cert_id
  • DE:
    • BSI-DSZ-CC-0511: 2
pdf_data/st_keywords/cc_protection_profile_id
  • BSI:
    • BSI-PP-0016: 2
pdf_data/st_keywords/cc_security_level
  • EAL:
    • EAL 4: 1
    • EAL 4 augmented: 1
    • EAL4: 3
    • EAL4 augmented: 1
  • EAL:
    • EAL2: 6
pdf_data/st_keywords/cc_sar
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.4: 1
    • ADV_IMP: 1
    • ADV_TDS.3: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.4: 1
    • ALC_CMS.4: 1
    • ALC_DEL.1: 1
    • ALC_DVS.1: 1
    • ALC_FLR.2: 2
    • ALC_FRL.2: 1
    • ALC_LCD.1: 1
    • ALC_TAT.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.2: 1
    • ATE_DPT.1: 1
    • ATE_FUN.1: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.3: 1
  • ADV:
    • ADV_ARC.1: 1
    • ADV_FSP.2: 1
    • ADV_SPM.1: 1
    • ADV_TDS: 1
  • AGD:
    • AGD_OPE.1: 1
    • AGD_PRE.1: 1
  • ALC:
    • ALC_CMC.2: 1
    • ALC_CMS.2: 1
    • ALC_DEL.1: 1
  • ASE:
    • ASE_CCL.1: 1
    • ASE_ECD.1: 1
    • ASE_INT.1: 1
    • ASE_OBJ.2: 1
    • ASE_REQ.2: 1
    • ASE_SPD.1: 1
    • ASE_TSS.1: 1
  • ATE:
    • ATE_COV.1: 1
    • ATE_FUN: 1
    • ATE_FUN.1: 1
    • ATE_IND: 1
    • ATE_IND.2: 1
  • AVA:
    • AVA_VAN.2: 1
pdf_data/st_keywords/cc_sfr
  • FAU:
    • FAU_ARP: 3
    • FAU_ARP.1: 5
    • FAU_ARP.1.1: 1
    • FAU_GEN: 2
    • FAU_GEN.1: 10
    • FAU_GEN.1.1: 2
    • FAU_GEN.1.2: 1
    • FAU_GEN.2: 4
    • FAU_GEN.2.1: 1
    • FAU_SAA: 1
    • FAU_SAA.1: 8
    • FAU_SAA.1.1: 1
    • FAU_SAA.1.2: 1
    • FAU_SAA.2: 6
    • FAU_SAA.2.1: 1
    • FAU_SAA.2.2: 1
    • FAU_SAA.2.3: 1
    • FAU_SAR: 2
    • FAU_SAR.1: 5
    • FAU_SAR.1.1: 1
    • FAU_SAR.1.2: 1
    • FAU_SAR.2: 3
    • FAU_SAR.2.1: 1
  • FCS:
    • FCS_CKM.1: 13
    • FCS_CKM.1.1: 1
    • FCS_CKM.2: 10
    • FCS_CKM.2.1: 1
    • FCS_CKM.4: 13
    • FCS_CKM.4.1: 1
    • FCS_COP.1: 11
    • FCS_COP.1.1: 1
  • FDP:
    • FDP_ACC.1: 12
    • FDP_ACC.1.1: 1
    • FDP_ACF.1: 12
    • FDP_ACF.1.1: 1
    • FDP_ACF.1.2: 1
    • FDP_ACF.1.3: 1
    • FDP_ACF.1.4: 1
    • FDP_IFC.1: 1
    • FDP_ITC.1: 3
    • FDP_ITC.2: 3
  • FIA:
    • FIA_AFL.1: 6
    • FIA_AFL.1.1: 1
    • FIA_AFL.1.2: 1
    • FIA_ATD.1: 7
    • FIA_ATD.1.1: 1
    • FIA_UAU.1: 8
    • FIA_UAU.1.1: 1
    • FIA_UAU.1.2: 1
    • FIA_UAU.2: 3
    • FIA_UAU.2.1: 1
    • FIA_UAU.5: 9
    • FIA_UAU.5.1: 1
    • FIA_UAU.5.2: 1
    • FIA_UAU.6: 7
    • FIA_UAU.6.1: 1
    • FIA_UID.1: 13
    • FIA_UID.1.1: 1
    • FIA_UID.1.2: 1
    • FIA_UID.2: 7
    • FIA_UID.2.1: 1
  • FMT:
    • FMT_MSA.1: 5
    • FMT_MSA.1.1: 1
    • FMT_MSA.3: 5
    • FMT_MSA.3.1: 1
    • FMT_MSA.3.2: 1
    • FMT_SMF.1: 5
    • FMT_SMF.1.1: 1
    • FMT_SMR.1: 12
    • FMT_SMR.1.1: 1
    • FMT_SMR.1.2: 1
  • FPT:
    • FPT_STM.1: 3
  • FTA:
    • FTA_TAH: 3
    • FTA_TAH.1: 5
  • FDP:
    • FDP_ACC.1: 1
    • FDP_ACF.1: 1
    • FDP_RIP: 2
    • FDP_RIP.1: 1
    • FDP_RIP.2: 7
  • FIA:
    • FIA_ATD.1: 1
    • FIA_UAU: 4
    • FIA_UAU.1: 1
    • FIA_UAU.2: 4
    • FIA_UAU.3: 8
    • FIA_UID: 2
    • FIA_UID.1: 2
    • FIA_UID.2: 5
  • FPT:
    • FPT_RPL: 3
    • FPT_RPL.1: 10
pdf_data/st_keywords/cc_claims
  • A:
    • A.COMPENT_ADMIN: 1
    • A.COMPENT_ADMINSTRATORS: 1
    • A.FIREWALL: 2
    • A.MAIL_SERVER: 2
    • A.MALICIOUS_CODE: 1
    • A.NO_EVIL: 2
    • A.OPERATING_SYSTEM: 1
    • A.PORT_PROTECT: 2
    • A.TIME_STAMP: 2
  • D:
    • D: 1
  • O:
    • O.ALERT: 6
    • O.AUDIT: 7
    • O.AUTH_MECH: 8
    • O.MOBILE_SENSITVE: 2
    • O.MOBILE_SENSITVE_: 1
    • O.MOBILE_SENSITVE_PROTECTION: 5
    • O.TRAFFIC_PROTECTION: 23
    • O.USER_ACC: 1
    • O.USER_ACC_CONTROL: 19
  • OE:
    • OE.COMPENT_: 1
    • OE.COMPENT_ADMINSTRATORS: 1
    • OE.FIREWALL: 2
    • OE.MAIL_SERVER: 2
    • OE.MALICIOUS_CODE_N: 1
    • OE.MALICIOUS_CODE_NOT_SIGN: 1
    • OE.NO_EVIL: 2
    • OE.OPERATING_SYSTEM: 1
    • OE.PHYSICAL_PROTECTION: 1
    • OE.PORT_PROTECT: 2
    • OE.TIME_STAMP: 2
  • T:
    • T.CUMMUNICATION: 1
    • T.CUMMUNICATION_ATTACK: 1
    • T.DATA_ACCESS: 2
    • T.MOBILE: 1
    • T.MOBILE_ATTACK: 1
    • T.USER_ACC_CONTROL: 1
    • T.WEB_ATTACK: 2
  • A:
    • A.ADMINISTRATION: 4
    • A.AUDIT_REACTION: 4
    • A.AUTHADMIN: 4
    • A.ENROLMENT: 4
    • A.ENVIRONMENT: 4
    • A.FALLBACK: 4
    • A.PHYSICAL: 5
    • A.ROLES_AND_ACCESS: 4
  • O:
    • O.BIO_VERIFCATION: 1
    • O.BIO_VERIFICATION: 9
    • O.NO_REPRODUCE: 8
    • O.RESIDUAL: 5
    • O.RESIDUAL_CAPTURE: 6
  • OE:
    • OE.ADMINISTRATION: 5
    • OE.AUDIT_REACKTION: 1
    • OE.AUDIT_REACTION: 17
    • OE.AUTHADMIN: 9
    • OE.ENROLMENT: 5
    • OE.ENVIRONMENT: 5
    • OE.FALLBACK: 3
    • OE.PHYSICAL: 5
    • OE.ROLES_AND_ACCESS: 9
  • OSP:
    • OSP.FAR: 7
    • OSP.USERLIMIT: 4
  • T:
    • T.BRUTEFORCE: 5
    • T.MODIFY_ASSETS: 7
    • T.REPRODUCE: 5
    • T.RESIDUAL: 9
    • T.ROLES: 8
pdf_data/st_keywords/symmetric_crypto
  • AES_competition:
    • AES:
      • AES: 14
pdf_data/st_keywords/asymmetric_crypto
  • ECC:
    • ECC:
      • ECC: 3
pdf_data/st_keywords/crypto_protocol
  • TLS:
    • SSL:
      • SSL: 1
pdf_data/st_keywords/standard_id
  • PKCS:
    • PKCS#11: 2
    • PKCS#12: 3
pdf_data/st_keywords/certification_process
  • OutOfScope:
    • Out of Scope: 1
    • issuer certificate validity, certificate status, and the certificate owner Mobile audio pass (Out of Scope) TOE will generate challenge and PKI certificate will be used to sign the challenge. The signature: 1
    • out of scope: 5
    • procedure. Table 21: Authentication Components Authentication Method of authentication PKI token (out of scope) The user prompted to select the valid certificate from the list, and then TOE will verify the: 1
    • serial number / fingerprint that stored in the DB. Hardware CR OTP (out of scope) User needs to have CR OTP token to use this feature. User will request for a challenge from the: 1
    • then be sent back to the TOE by the mobile application and verified for its validity. FIDO (out of scope) User need to plugged in the token then click on the button of the token to submit the validation: 1
    • token. This is out of the scope of the evaluation. Also, using SMS to register the device is also out of scope of evaluation. SecureMetric Technology Sdn Bhd 2016 Page 17 of 76 For QR code registration: 1
    • which will then be used by the user to generate the OTP. Hardware OTP (out of scope) User needs to have OTP token to use this feature. User will generate an OTP from the OTP token and: 1
  • OutOfScope:
    • Biometric Identification is not addressed within this ST. Furthermore the enrolment process is out of scope of this ST and it is assumed that all authorized users have been enrolled. Last but not least a: 1
    • a mechanism for audit review of the TOE audit logs. As mentioned before all auditing aspects are out of scope of the TOE. • Transmission / Storage: The environment cares for a secure communication and storing: 1
    • higher error rates of those systems are only two of them. The biometric identification process is out of scope of this ST. Please see [BEM] or [BPT] for further explanations. 1.5.2 Wording in context of Common: 1
    • out of scope: 5
    • the BIR to a name or some other "real-life" identification of a user is up to the application and out of scope of the TOE. VERSION 1.0 Security Target for PalmSecure 14.September 2008 All Rights Reserved: 1
    • user identity from the TOE. As mentioned before the specific connection to the Portal Service is out of scope of the TOE and depends on the overall application using the PalmSecure Library. • Auditing: The: 1
pdf_data/st_metadata
  • /Author: Rajiv;Biau
  • /CreationDate: D:20170523024954+00'00'
  • /Creator: Microsoft Word
  • /Keywords: ST
  • /ModDate: D:20170720134505+08'00'
  • /Title: Centagat Security Target
  • pdf_file_size_bytes: 1592329
  • pdf_hyperlinks: {}
  • pdf_is_encrypted: False
  • pdf_number_of_pages: 76
  • /Author: Fujitsu
  • /Company: Fujitsu
  • /CreationDate: D:20090105144849+09'00'
  • /Creator: Word 用 Acrobat PDFMaker 8.1
  • /Keywords: authentication,biometric,identification,verification
  • /ModDate: D:20090105145458+09'00'
  • /Producer: Acrobat Distiller 8.1.0 (Windows)
  • /SourceModified: D:20090105054723
  • /Subject: PalmSecure SDK
  • /Title: Security Target for PalmSecure
  • pdf_file_size_bytes: 707424
  • pdf_hyperlinks: http://www.bsi.bund.de/
  • pdf_is_encrypted: True
  • pdf_number_of_pages: 59
state/report/pdf_hash Different Different
state/report/txt_hash Different Different
state/st/pdf_hash Different Different
state/st/txt_hash Different Different